Trust manually installed certificate profiles in iOS and iPadOS - Apple Support (2024)

FAQs

How do I trust manually installed certificate profiles in iOS and Ipados? ›

If you want to turn on SSL/TLS trust for that certificate, go to Settings > General > About > Certificate Trust Settings. Under "Enable full trust for root certificates," turn on trust for the certificate.

Root certificates on iPhone and iPad

This certificate won't be trusted for websites until you enable it in Certificate Trust Settings.” The user can then trust the certificate on the device by going to Settings > General > About > Certificate Trust Settings.

On your iPhone, tap on Settings, then tap on General, tap on About, and then scroll down and tap on the Certificate Trust Settings. Next, there is a section called "ENABLE FULL TRUST FOR ROOT CERTIFICATES". turn on the trust for the certificate.

TLS server certificates and issuing CAs using RSA keys must use key sizes greater than or equal to 2048 bits. Certificates using RSA key sizes smaller than 2048 bits are no longer trusted for TLS. TLS server certificates and issuing CAs must use a hash algorithm from the SHA-2 family in the signature algorithm.

Tap Settings > General > Profiles or Profiles & Device Management. Under the "Enterprise App" heading, you see a profile for the developer. Tap the name of the developer profile under the Enterprise App heading to establish trust for this developer. Then you see a prompt to confirm your choice.

Before the certificate can be used as intended, it must be trusted by the device. On the device, go to Settings > General > About > Certificate Trust Settings (at the bottom of the page).

On Android, they are stored in the system keychain.

The most common cause of a "certificate not trusted" error is that the certificate installation was not properly completed on the server (or servers) hosting the site. Use our SSL Certificate tester to check for this issue. In the tester, an incomplete installation shows one certificate file and a broken red chain.

Electronic certificates on iOS mobiles

You can select a specific certificate to remove from the profile list by going to "Settings", "General", "Profile". The window with the certificate information and the "Delete" option will be displayed.

How do I remove a non trusted certificate from my iPhone? ›

If you're unsure you can check by going to Settings > General > Profiles & Device Management. If there's a profile installed you should be able to select the profile, tap More Details, then tap the certificate to remove it.

Choose Keychain Access > Certificate Assistant > Evaluate [certificate name]. Select a trust policy: To evaluate an email certificate, select S/MIME, then type the email address of the sender. To evaluate a web server, select SSL, then type the host server's URL.

In the Keychain Access app on your Mac, select either the login or System keychain. Drag the certificate file onto the Keychain Access app. If you're asked to provide a name and password, type the name and password for an administrator user on this computer.

If you don't want to trust a computer or other device anymore, change the privacy settings on your iPhone, iPad, or iPod touch. Go to Settings > General > Reset > Reset Location & Privacy. Now when you connect to formerly trusted computers, the Trust alert will ask you whether you trust that computer.

Electronic certificates on iOS mobiles

You can select a specific certificate to remove from the profile list by going to "Settings", "General", "Profile". The window with the certificate information and the "Delete" option will be displayed.